Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Post Duplicator — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in Post Duplicator, with AI-generated Chinese analysis, references, and POCs.

Vendor: Metaphor Creations

CVE ID Title CVSS Severity Published
CVE-2026-121875 Post Duplicator < 3.0.18 - Admin+ Privilege Escalation via Unvalidated Capability Assignment - - 2026-11-09
CVE-2026-121874 Post Duplicator < 3.0.18 - Admin+ Arbitrary Option Update via Unvalidated Option Name - - 2026-11-09
CVE-2026-111740 Post Duplicator < 3.0.17 - Contributor+ Draft and Private Post Title Disclosure - - 2026-11-04
CVE-2026-4244 Post Duplicator <= 3.0.11 - Missing Authorization to Authenticated (Contributor+) Post Duplication with Arbitrary Author Attribution CWE-862 4.3 Medium 2026-08-22
CVE-2026-4245 Post Duplicator <= 3.0.11 - Authorization Bypass to Authenticated (Contributor+) Post Duplication CWE-863 4.3 Medium 2026-08-22
CVE-2026-10749 Post Duplicator < 3.0.15 - Contributor+ PHP Object Injection via customMetaData - - 2026-06-24
CVE-2026-39474 WordPress Post Duplicator plugin <= 3.0.10 - PHP Object Injection vulnerability CWE-502 8.8 High 2026-06-15
CVE-2026-2301 Post Duplicator <= 3.0.8 - Missing Authorization to Authenticated (Contributor+) Protected Post Meta Insertion via 'customMetaData' Parameter CWE-862 4.3 Medium 2026-02-25
CVE-2025-24736 WordPress Post Duplicator plugin <= 2.35 - Broken Access Control vulnerability CWE-862 4.3 Medium 2025-01-24
CVE-2024-12472 Post Duplicator <= 2.36 - Authenticated (Contributor+) Protected Post Disclosure CWE-639 4.3 Medium 2025-01-11
CVE-2023-49835 WordPress Post Duplicator plugin <= 2.31 - Broken Access Control vulnerability CWE-862 4.3 Medium 2024-12-09

All 11 known CVE vulnerabilities affecting Post Duplicator with full Chinese analysis, references, and POCs where available.